topic Samba problems (again) in Operating System - Linux

Samba problems (again)

Alex Lavrov. — Thu, 05 Jul 2007 12:19:35 GMT

Hello,

After I reinstalled a server with RedHat ES3, I ran into a strange problem.

Samba is configured to work with a domain, binding went ok, but when I try \\server\public, a get this message in the log files:
[2007/07/05 20:09:22, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
Failed to verify incoming ticket!

If I do \\\public, everything wirks fine.

Any ideas what can be done?

Thanx.

Re: Samba problems (again)

Rob Leadbeater — Thu, 05 Jul 2007 14:55:58 GMT

Hi Alex,

Is the time synchronised properly between all the relevant servers...? I seem to recall the ticketing mechanism in Kerberos being picky about that...

Cheers,

Rob

Re: Samba problems (again)

Alex Lavrov. — Thu, 05 Jul 2007 14:57:45 GMT

Yep, I already cheked it. The difference is couple of seconds.

Re: Samba problems (again)

Ivan Krastev — Thu, 05 Jul 2007 17:18:06 GMT

Try to add rc4-hmac algorithm in your KERB5.conf file.

regards,
ivan

Re: Samba problems (again)

Court Campbell — Fri, 06 Jul 2007 07:13:01 GMT

from:

http://www.wlug.org.nz/ActiveDirectoryKerberos

The solution was to remove (comment out just in case!) the following 3 lines from krb5.conf:

[libdefaults]
#default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
#default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
#permitted_enctypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5

Re: Samba problems (again)

Steven E. Protter — Fri, 06 Jul 2007 10:30:54 GMT

Shalom,

up2date the system to current.

Seems like a DNS inconsistency if what the system thinks it is versus what the domain says it is.

Shabbat Shalom Alex.

I'll check this Motzei Shabbat.

SEP

Re: Samba problems (again)

Alex Lavrov. — Fri, 06 Jul 2007 11:16:08 GMT

Hello,

Thanx for the replies. I will try them on Sunday and update this thread.

Alex.